This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json) Hash identifier: CK1zjCJsAOeOr1guYy2NYCNUbUJtVgxeB+6w7ing0Rg= Subject key identifier: 57:43:77:53:0C:1A:90:D2:C7:BB:D8:E3:DA:01:1E:0D:66:FF:98:9E Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Certificate serial: 019BF53E7330B02D3DA13451764302419E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft Manifest number: 0113 Signing time: Sun 25 Jan 2026 13:01:09 +0000 Manifest this update: Sun 25 Jan 2026 13:01:09 +0000 Manifest next update: Mon 26 Jan 2026 13:01:09 +0000 Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: Q4kV1PhmCkaIItjYXv7U8rkY8kyfTLqISqpMLY9Kghs=) 2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:73:30:b0:2d:3d:a1:34:51:76:43:02:41:9e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Validity Not Before: Jan 25 13:01:09 2026 GMT Not After : Jan 26 13:01:09 2026 GMT Subject: CN=574377530c1a90d2c7bbd8e3da011e0d66ff989e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:2c:cc:4f:77:65:f7:66:86:04:47:9d:1a: bb:c0:85:ac:50:d3:6b:f8:03:3b:47:af:e9:30:1c: 1c:fc:a1:6e:4e:47:5c:1c:9f:3f:24:16:f9:42:3d: 5e:ab:c4:7b:1d:fa:d6:b7:2a:80:08:a4:64:db:54: 83:7c:fc:91:d6:a6:91:8f:bd:68:e8:55:90:69:b2: 66:72:2d:e6:e2:06:4a:9e:29:7a:0a:bd:5f:3f:43: cc:cd:b5:11:73:23:05:e4:5a:4a:32:57:3f:71:19: b4:cb:75:fe:33:9e:e0:e7:35:d3:65:a2:20:5c:9d: 25:32:49:8c:56:4b:6c:ba:24:a3:fa:e7:bf:46:0c: e4:cf:5d:2c:0a:03:84:a6:11:70:19:98:55:50:9b: 51:18:c8:b8:c9:2d:0c:cb:c0:81:12:96:91:90:98: b7:47:31:71:ea:63:85:ce:23:b1:7a:03:a7:66:78: da:08:ba:ba:d9:3b:33:4d:41:b2:58:4e:e8:56:fe: 00:ec:fd:9f:1b:a0:6e:6f:80:da:29:de:18:2c:1a: 88:00:3c:09:6b:84:ca:11:77:03:26:04:60:b5:c4: a6:c1:fa:92:3a:3e:0f:12:2c:f2:12:7b:ce:40:ec: f8:ea:10:80:fe:a6:ba:15:fe:06:12:f4:38:59:f6: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:43:77:53:0C:1A:90:D2:C7:BB:D8:E3:DA:01:1E:0D:66:FF:98:9E X509v3 Authority Key Identifier: keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2d:d2:26:8e:ab:d3:3e:ad:5f:db:d3:97:a9:06:a8:6c:7d: 22:9d:91:48:b0:82:c6:47:fc:fa:45:d3:bb:35:89:f6:01:68: 0d:5a:f2:9e:9c:0e:b2:67:70:79:bc:a5:ea:2e:5b:e1:c2:99: 3a:78:11:92:e3:f9:fc:38:70:3d:ec:6f:30:06:4d:98:b4:a8: 89:16:fe:f5:b3:e4:99:49:ba:96:10:76:62:3c:e1:fa:5c:94: 99:8e:60:cd:cc:87:5f:3e:c5:bb:b2:9d:2f:c3:b9:c3:1d:12: bb:81:ca:88:65:83:48:75:d1:f3:20:2e:14:f1:a1:bb:e5:bb: 9a:09:5e:b5:30:c0:da:c4:3a:82:5d:97:07:52:07:b1:7b:ce: 89:91:87:d8:e5:01:8f:96:cf:11:14:b7:a0:07:0b:db:31:8e: 36:af:ce:df:0b:46:9f:f5:99:47:5f:83:de:8f:c4:09:56:db: 29:e8:3b:2d:b3:a7:8e:0f:66:31:eb:9e:8c:4f:53:41:48:0a: 1c:70:79:29:d7:30:76:a6:86:54:bf:73:66:b1:42:01:90:1a: 14:62:41:d8:81:fc:82:74:e3:1e:c9:b5:36:e9:e1:ab:0f:23: 92:c7:bd:b5:35:f0:04:90:68:f0:e5:4c:80:f0:f2:bc:a8:61: 03:8d:bb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PnMwsC09oTRRdkMCQZ5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0 YmVlZjcwHhcNMjYwMTI1MTMwMTA5WhcNMjYwMTI2MTMwMTA5WjAzMTEwLwYDVQQD Eyg1NzQzNzc1MzBjMWE5MGQyYzdiYmQ4ZTNkYTAxMWUwZDY2ZmY5ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRIszE93ZfdmhgRHnRq7wIWsUNNr +AM7R6/pMBwc/KFuTkdcHJ8/JBb5Qj1eq8R7HfrWtyqACKRk21SDfPyR1qaRj71o 6FWQabJmci3m4gZKnil6Cr1fP0PMzbURcyMF5FpKMlc/cRm0y3X+M57g5zXTZaIg XJ0lMkmMVktsuiSj+ue/Rgzkz10sCgOEphFwGZhVUJtRGMi4yS0My8CBEpaRkJi3 RzFx6mOFziOxegOnZnjaCLq62TszTUGyWE7oVv4A7P2fG6Bub4DaKd4YLBqIADwJ a4TKEXcDJgRgtcSmwfqSOj4PEizyEnvOQOz46hCA/qa6Ff4GEvQ4WfajXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdDd1MMGpDSx7vY49oBHg1m/5ieMB8GA1UdIwQY MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2 LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi3SJo6r 0z6tX9vTl6kGqGx9Ip2RSLCCxkf8+kXTuzWJ9gFoDVrynpwOsmdwebyl6i5b4cKZ OngRkuP5/DhwPexvMAZNmLSoiRb+9bPkmUm6lhB2Yjzh+lyUmY5gzcyHXz7Fu7Kd L8O5wx0Su4HKiGWDSHXR8yAuFPGhu+W7mgletTDA2sQ6gl2XB1IHsXvOiZGH2OUB j5bPERS3oAcL2zGONq/O3wtGn/WZR1+D3o/ECVbbKeg7LbOnjg9mMeuejE9TQUgK HHB5KdcwdqaGVL9zZrFCAZAaFGJB2IH8gnTjHsm1Nunhqw8jkse9tTXwBJBo8OVM gPDyvKhhA427rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:18 2026 by rpki-client